COMPUTING GENERATORS OF FREE MODULES 
OVER ORDERS IN GROUP ALGEBRAS 

WERNER BLEY AND HENRI JOHNSTON 

Abstract. Let -E be a number field and G be a finite group. Let A be any Os-order of 
full rank in the group algebra E[G] and AT be a (left) ^-lattice. We give a necessary and 
sufficient condition for X to be free of given rank d over A. In the case that the Wedderburn 
decomposition E[G] = (Bx^^ is explicitly computable and each is in fact a matrix ring 
over a field, this leads to an algorithm that cither gives elements ai, . . . , ad S X such that 
X = Aoi\ . . . ® Aad or determines that no such elements exist. 

Let L/if be a finite Galois extension of number fields with Galois group G such that E 
is a subfield of K and put d = \K : E\. The algorithm can be applied to certain Galois 
modules that arise naturally in this situation. For example, one can take X to be O^, the 
ring of algebraic integers of L, and A to be the associated order ^(£^[0]; Ol) C i?[G]. The 
application of the algorithm to this special situation is implemented in Magma under certain 
extra hypotheses when K = E = Q. 



1. Introduction 

Let E he a. number field and G be a finite group. Let A be any O^i-order of full rank in 
the group algebra E[G] and X be a (left) ^-lattice, i.e., a (left) ^-module that is finitely 
generated and torsion-free over Oe- The first result of this paper is a necessary and suffi- 
cient condition for X to be free of given rank d over A. In order to use this criterion for 
computational purposes, we have to impose two hypotheses: 

(HI) The Wedderburn decomposition E[G] = ©^M^, where each My. is a matrix ring over 

a division ring, is explicitly computable. 
(H2) The Schur indices of all ii^-rational irreducible characters of G are equal to 1, i.e., 

each above is in fact a matrix ring over a number field. 

Under these hypotheses, we give an algorithm that either computes elements ai, . . . , € X 
such that X = Aai © ... © Aa^ or determines that no such elements exist. More generally, 
the group algebra E[G] can be replaced by any finite product of matrix rings over number 
fields containing E, in which case G, and thus (HI) and (H2), play no role. 

The main motivation for this work has its origins in the following special case. Let L/K 
be a finite Galois extension of number fields with Galois group G such that E is a subfield 
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of K and put d = [K : E\. One can take X to be Ol, the ring of algebraic integers of L, 
and A to be the associated order 

A{E[G]- Ol) ■■= {x e E[G] I x{Ol) C Ol}. 

The apphcation of the algorithm to this special situation is implemented in Magma ( [BCP97] ) 
under certain extra hypotheses when K = E = Q. The source code and input files are 
available from 

http : //www . mathematik . uni-kassel . de/ ~bley/pub . html. 

Other Galois modules to which the algorithm can be applied include the G-stable ideals of 
Ol and, in certain cases, the torsion- free part of O^. 

The algorithm can be thought of as a non-abelian, higher rank generalization of the one 
given in |Ble97j : though stated for the Galois module structure of units, this can be adapted 
to general modules for G abelian and d = 1 with relatively few changes. It is also worth 
noting that under the same restrictions on G and d, the algorithm in |BE05j computes the 
Picard group Pic(^) and solves the corresponding refined discrete logarithm problem, thus 
computing a generator if it exists. 

There is a considerable body of work related to the motivating special case of the Galois 
module structure of rings of integers. We briefly mention just a few of these results, using the 
notation above. The most progress has been made in the case that L/K is at most tamely 
ramified. In this setting, it is well-known that A = Oe[G] and Ol is locally free over 
(see |Noe32j ). The algorithm in |BW] determines the class of Ol in the locally free class 
group C1(C£;[G]), and thus whether or not it is stably free (note that under hypothesis (H2) 
all stably free .4- modules are in fact free). Important work of Frohlich and Taylor determines 
the class of Ol itl the locally free class group C1(Z[G]) in terms of Artin root numbers of 
irreducible complex symplectic characters of G (see |Fro83j ) . Unfortunately, neither of these 
approaches lead to any description of generators. However, explicit generators or algorithms 
to find them when K = E = Q and G = A^, {p odd prime), Hs, H12, or ifg x C2 are 
given in |Gou06j . |GouOOj . |Mar69j . |GQ02| and |Gou98j . 

When no assumption regarding the ramification of L/K is made, the situation is somewhat 
more difficult, not least because Ol is not necessarily locally free over A. Perhaps the most 
important result in this context is Leopoldt's Theorem, which in the case that K = E = Q 
and G is abelian shows that Ol is always free over A and, in addition, explicitly constructs 
an element a G Ol in terms of Gauss sums such that Ol = Aa (see |Leo59j : Lettl gives a 
simplified proof in (Let90] ). In the setting K = E and L/Q abelian, progressively sharper 
generalizations of Leopoldt's Theorem (with explicit generators) are given in |CL93j . |Ble95j . 
jBL96] and [Johj . 

In future work, we hope to eliminate hypothesis (112). Finding an algorithm to explicitly 
compute Wedderburn decompositions and thereby eliminate hypothesis (HI) is an indepen- 
dent problem in its own right, on which some progress has been made by others. A more 
detailed discussion of both hypotheses is given in Section O 
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2. A Necessary and Sufficient Condition for Freeness 

Let E he a. number field and G be a finite group. Let A be any OE-order of full rank 
in the group algebra A := E[G], and let A4 be some maximal Og-order in A containing 
A. (In fact, the results of this section still hold when the group algebra E[G] is replaced 
by any finite-dimensional semisimple i?-algebra.) For any non- commutative ring R, we shall 
henceforth take "i?-module" to mean "left -R-module", unless otherwise stated. 

If p is a prime of Oe and M is an OE-module, we write Mp := Oe,p ®Oe ^ ^^r the 
localization of M at p. We say that M is locally free of rank d if for every p, we have Mp 
free over Ap of rank d. For an ^-lattice X, i.e., an ^-module that is finitely generated and 
torsion-free over Oe, we set JviX := M. and usually identify J^X with the sublattice 

{Ax I A G TW, X G X} of the .E- vector space E ®Oe We define AipXp in the same way. 

The main results of this paper are consequences of the following proposition. 

Proposition 2.1. Let X be an A-lattice. Then X is free of rank d if and only if 

(a) X is a locally free A-lattice of rank d, and 

(b) there exist ai, . . . , G X such that M.X = Aiai © ... © Aiad- 

Further, when this is the case, X = Aai © ... © Aad- 

Proof. If X is a free ^-lattice of rank d then (a) and (b) follow trivially. 

Suppose conversely that (a) and (b) hold and let Y = Aai © ... © Aaa C X. Both X and 
Y are locally free ^-lattices of rank d and so for each non- zero prime p of Oe there exists 
an isomorphism fp : Yp — > Xp of .4p-lattices which extends naturally to an isomorphism 
fp : AipYp — > A^pXp of TVlp-lattices. For each p we have 

[Xp : Yp]oE., = IfpiYp) : = dets(/p)0,,,p, 

where the two left-most terms are generalized module indices (see |FT91l II.4]). However, 
A4Y = M.X and so each fp : J^pYp — > A^pXp = TWpYp is in fact an Alp-automorphism 
and therefore also a Cg^p-automorphism. Hence detE(/p) G O^p and so [Xp : Y^q^^^ = Oe,p 
for each p. Together with the fact that F C X, this shows that X = Y. □ 

Let i? be a ring with identity and denote by the opposite ring. If M is a free i?-module 
of rank d, then a choice of basis for M induces an isomorphism EndR{M) = Matd(-R)°''. Note 
that for any subring of a left Noetherian ring, there is no distinction between left and right 
multiplicative inverses or units (see |Rei75t Theorem 6.4]). Hence we have Autij(M) : = 
EndniMy = GLd(i?)°P := (Matd(i?)°P)^ as groups. Since GLd(i?)°P = GLd{R) as sets, we 
shall henceforth drop the °p notation. 

Corollary 2.2. Let X be an A-lattice. Then X is free of rank d if and only if 

(a) X is a locally free A-lattice of rank d, 

(b) there exist [3i,...,(3de MX such that MX = MPi ® . . . ® M^d, and 

(c) there exists A G Ghd^M) such that each G X where (ai, . . . , ad)^ := A(/3i, . . . , Pd)^ . 

Further, when this is the case, X = Aai © ... © Aad- 
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Most of the following notation is adopted from |BB06] . Denote the center of a ring R by 
Z{R). Set C := Z{A) and let Oc be the integral closure of Oe in C. Let ei, . . . , be the 
primitive idempotents of C and set Ai := Aei. Then 

(1) A = Ai®---®Ar 

is a decomposition of A into indecomposable ideals. Each Ai is an iJ-algebra with identity 
element Cj. By Wedderburn's Theorem, the centers Ei := Z{Ai) are finite field extensions of 
E via E —>■ Ei, a i— *• aCi, and we have ii^-algebra isomorphisms Ai = Mat„.(Dj) where Di is 
a division ring with Z{Di) = Ei. The decomposition ([T]) gives 

(2) C = Ei®---®Er, Oc = Oei®---®Oe,, and = TWi © • ■ ■ © 
where we have set Aii := A^Cj. This in turn induces decompositions 

(3) Matd(A<) = Matd(A^i) ©... ©Matd(A<r.) and 

(4) GUiM) = GU{Mi) X ... X GU{Mr). 

For the rest of this section we suppose 1 < i < r and 1 < j < d. 

Corollary 2.3. Let X be an A-lattice. Then X is free of rank d if and only if 

(a) X is a locally free A-lattice of rank d, 

(b) for each i, there exist . . . , (3i^d such that A4iX = M.i(3i^i © ... © AiiPi^d, and 

(c) there exist Aj G GLd{Aii) such that each aj G X , where aj := J2l=i 
and . . . , ai^d)^ := XiiPi^i, . . . , Pi,d)^ ■ 

Further, when this is the case, X = Aai © ... © Aad- 

Let f be any full two-sided ideal of Ai contained in A. Then we have f C ^ C C A. 
Set Ai := Ai/f and A := A/f so that A Ai are finite rings, and denote the canonical map 
— > by m m. Note that we have decompositions 



(5) f = fi©...©f^ and Ai = Ali © ■ ■ • © AI, 



where each fi is a non-zero ideal of Aii and Aii := Alj/fj. 

For each i, let Ui C GLrf(Alj) denote a set of representatives of the image of the natural 
projection GLd{Aii) — > GLd{Ati). 

Corollary 2.4. Let X be an A-lattice. Suppose that 

(a) X is a locally free A-lattice of rank d, and 

(b) for each i, there exist Pi^i, . . . , Pi^d such that A4iX = AiiPi^i © ... © AljA,^. 
Then X is free of rank d over A if and only if 

(c) there exist Aj G Ui such that each aj G X , where aj := X]i=i 
and . . . , ai^d)^ := Xi{Pi,i, . .., Pi,d)'^ . 

Further, when this is the case, X = Aai © ... © Aad- 
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Proof. If condition (c) holds, then the result follows immediately from Corollary 12.31 

Suppose conversely that X is free of rank d over A. Then by Corollary 12.31 there exist 
Aj G GLd{J^i) such that each aj G X where the a/s are defined as above. However, as f is 
a two-sided ideal of A, we have 

r r r 

0(A, + Matrf(f,))(A,i, . . . , M'^ C A,(A,i, . . . , + M^U{U)iM,XY 

i=l i=l i=l 

r 

= . . . , a^Y + M^U{U){M,XY C X". 

i=l 

Thus we can suppose without loss of generality that Aj G Ui for each i. □ 

Let L/K be a Galois extension of number fields with Galois group G such that E is a, 
subfield of K. Let d = [K : E] and write Ol for the ring of integers of L. One of the main 
applications of Corollary 12.41 is to determine whether the ring of integers Ol is free of rank 
d over the associated order A = A{E[G]; Ol) := {x G E[G] \ x{Ol) C Ol}. 

In the case that G is abelian and E = K, the maximal order Ai is unique and everything 
can be made completely explicit in terms of the absolutely irreducible characters of G. We 
refer the reader to |Ble97l Section 2.2]. The combination of Theorem 2.8 and Lemma 2.9 of 
loc. cit. is essentially equivalent to Corollary 12.41 given here specialized to the abelian case. 

We also remark that in the case that E = K and L/K is an at most tamely ramified 
Kummer extension with G cyclic, results of Ichimura (see j lch04l Theorem 2]) are, though 
not exactly the same, very similar to Corollary 12.41 when applied to this special situation. 

3. The Algorithm 

Let ii^ be a number field and G be a finite group. Let A be any OE-ordei of full rank in the 
group algebra E[G] and let X be an ^-lattice. In this section, we give an algorithm based on 
Corollary 12. 41 that either computes elements ai, . . . , G Ol such that X = Aai®. ■ .Q)Aad, 
or determines that no such elements exist. In other words, the algorithm determines whether 
X is free over A, and if so, computes exphcit generators. 

We require the hypotheses (HI) and (H2) formulated in the introduction, which we now 
recall and briefly remark upon. Note that the algorithm still works if the group algebra E[G] 
is replaced by any finite product of matrix rings over number fields containing E, in which 
case G, and thus (HI) and (H2), play no role. 

(HI) The Wedderburn decomposition E[G] = (BxM^, where each is a matrix ring over 
a division ring, is explicitly computable. 

If G is abelian the Wedderburn decomposition can be explicitly computed from the 
character table. For G non-abelian, many decompositions can be found in the lit- 
erature or computed "by hand". Note that this problem is equivalent to explicitly 
finding all irreducible -modules up to isomorphism. An effective method that 
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dates back to Schur to solve this important computational task in the case where G 
is soluble is likely to be implemented in Magma v2.14. 

(H2) The Schur indices of all ii^-rational irreducible characters of G are equal to 1, i.e., 
each M-^ above is in fact a matrix ring over a number field. 

This holds, for example, whenever 

(a) G is abelian, dihedral or symmetric; 

(b) G is a p-group where p is an odd prime; or 

(c) E contains a primitive m-th root of unity, where m is the exponent of G. 

A full discussion of Schur indices is given in |Isa94t Chapter 10]. An algorithm of 
Nebe and linger to compute the Schur index will be implemented in Magma v2.14 (a 
paper on this work is in preparation). 

Before we sketch the individual steps of the algorithm, we briefly digress to describe the 
presentation of our data. We always assume that (9£;[G'] -modules X are given by an Oe- 
pseudo-basis as described, for example, in |CohOOt Definition 1.4.1]. To be more precise, 
we assume that V := E ®Oe given by an £'-basis Vi,...,Vm together with matrices 
A{a) G GLm{E) for each a E G describing the action of G, 





U 


( «■ \ 




1 =-4(<T)j 




\ f m / 







Then X = aiWi © . . . amWm, where each Oj is a fractional ideal of Oe and each Wi G V. 
Similarly, A = biAi © . . . b„A„ with fractional 0£;-ideals bj and Aj G E[G]. 

Algorithm 3.1. Input: A and X as above. 

(1) Compute d := ([im.E{E ®Oe -^)/\^\ ^''^d, check that c? G N. 

(2) Compute a maximal OE-order Ai in E[G] containing A. 

(3) Compute the central primitive idempotents Ci and the components Aii := Aici. 

(4) Compute the conductor c of A in Ai and the components Cj := ccj. 
Then compute the ideals Qi := Cid OEi and fi := QiAii for each i. 

(5) For each i, compute Pi^i, . . . , Pi^d such that M.iX = AiiPi^i © ... © J^iPi^d- 

(6) Check that X is locally free of rank d over A. 

(7) For eachi, compute a set of representatives Ui C GLd{M.i) of the image of the natural 
projection map GLrf(A^j) — > GLrf(A^j), where M.i := A^j/f,. 

(8) Find a tuple (Aj) G ni=i ^^^^ ^^'^^ ^^^^ ^^^^ ^ where aj := X]i=i 



and . . . , ai^d) ■= ^i{Pi,i} • • • ; Pi,d) ■ For such a tuple, X = Aai © ... © Aa, 



d- 



Before commenting on the individual steps, we remark that steps (1) to (4) can be done 
in full generality without assuming hypotheses (HI) or (H2). 

(1) If we replace E[G] by some finite product of matrix rings over number fields A, then 
we define d := dimE{E ®Oe dim£;(74). 

(2) An algorithm for computing }A is described in |FriOOl Kapitel 3 and 4]. 
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(3) Each central primitive idempotent corresponds to an irreducible i?-character Xi and 
we have = g| EgeG x(fi'"^)fi' with rii = 

(4) In practice, we compute some multiple of the conductor. For example, one can use 
the method outlined in pTB06i 3.2 (f) and (g)]. Also see |BB06i Remark 3.3]. 

(5) This step is described in Section [51 

(6) Successful completion of step (5) shows that AiX is a free A^-module of rank d. 
Therefore X is locally free of rank d over A except possibly at the (finite number 
of) primes of Oe dividing the generalized module index [^A : ^]c>b- An algorithm to 
compute local basis elements (and thus to check local freeness) at these primes is given 
in |BW| Section 4.2]. Note that in the motivating case X = Ol for some number field 
L (see introduction), M.X is always locally free over M. and so checking local freeness 
can be performed independently of step (5) and therefore without hypotheses (HI) 
or (H2). (To see this, note that M.X is projective over M. by |Rei75l Theorem 21.4], 
and L is free over K[G\ and thus E[G\ by the Normal Basis Theorem.) 

(7) This step is described in Section El 

(8) The number of tests for this step can be greatly reduced by using a method analogous 
to the one outlined |Ble97| Section 2] . We briefly describe this approach in Section [71 
However, even with this improvement, the enumeration is the most time-consuming 
part of the whole algorithm. 

4. Computing Associated Orders 

Let X be a finitely generated 0£;[G]-module in the free i?[G']-space V := E®Oe^- this 
section, we shall assume that an i?[G]-basis f i, . . . , of is known. The aim is to compute 
the order 

A{X) = A{E[G];X) := {A E E[G] \ XX C X}. 

We describe an algorithm which combines and contains all of the methods of |Ble97] . |BurOO[ 
Appendix] and [BE051 Lemma 3.1]. 

For further applications, such as the computation of conductors, we consider a more general 
problem and describe an algorithm to compute 

A{X, Y) = A{E[G];X, Y) := {A G E[G] \ XX C Y}, 

where Y (1 V is another full (9s[G']-submodule. Without loss of generality we may assume 
that X,Y C E[GY. 

We denote hj t : E[G] x E[G] — > E any symmetric, non-degenerate i?-bilinear pairing. 
For computational purposes we usually use the trace pairing which is characterized by 

t{g, h) = < ' ' ioi g,h E G. 

I otherwise. 

We let s : E[GY x E[G]'^ — > E be the d-fold orthogonal sum of t. For any Ce[G] -module 
M in E[GY, respectively E[G], we identify the linear dual M* := Romoj^iM, Oe) with 
{A E E[GY I s(A,M) C Oe}, respectively {A E E[G] \ t{X,M) C Oe}- If M is given by a 
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pseudo-basis (/i^, Ck)k, then M* is easy to compute. Indeed, if {/i^} is the dual basis of {f^k} 
with respect to s, respectively t, then (/x^, c^^)^ is a pseudo-basis of M*. It is clear that the 
dual basis {/i^} can be computed by means of straightforward linear algebra. 
We now define an i?[G']-module homomorphism 

{■,■)■■ E[G]'^ X EG"^ — > E[G], 

g&G 

This homomorphism satisfies 

(6) z/), (5) = s(z/, = s(z/5, n) 

for /i,z/ G E[GY and 5 G 

Lemma 4.1. LetV be a free E[G\- space of rank d and letX,Y be two full OE[G]-submodules 
ofV. Then {X,Y*) = A{X,Yy. 

Proof. Using ([6]), this is essentially the same as the proof of |BB96t Lemma 4.2]. □ 

Remark 4.2. The main application is the following. Let L/K he a finite Galois extension of 
number fields with Galois group G such that ii^ is a subfield of K and put d = [K : E]. Let 
I be an ambiguous (i.e. G-stable) ideal of the ring of integers Ol and define the associated 
order to be A{E[G]; I) := {x G E[G] \ x{I) C J}. In |Gir99j . an algorithm to compute a 
normal basis element for L over K (i.e. a generator for L as a i^fCj-module) is given, and 
from this it is easy to determine an £'[G]-basis of L. (It is also often easy to do this by 
trial and error.) Hence we can apply the above method to compute the associated order and 
then, assuming hypotheses (HI) and (H2), find generators using Algorithm 13.11 

Remark 4.3. The method of this section together with Algorithm 13.11 can also be used to 
investigate the Galois module structure of units as in |Ble97| . For a number field L, write 



Ul for the units of Ol and fi{L) for the subgroup of roots of unity. Set X := Ui/fi^L) and 
write A for the semisimple algebra which acts naturally on Q^^X. The following cases can 
be considered: 



(a) L/Q a totally real Galois extension, A = Q[G]/ y^g^zc 9 

(b) L/Q a CM Galois extension with complex conjugation r, A = Q[G]/ {^t — 1, J2geG 9 

(c) L/K a Galois extension of a quadratic imaginary field K, A = Q[G]/ ^X]c,gg5')- 

Note that by |Was97l Lemma 5.27] the module Q®z-^ is free over A, so that AiX is always 
locally free over A4. Hence checking local freeness can be performed without the assumption 
of hypotheses (HI) and (H2). 

Remark 4.4. It is always possible to compute an i?[G']-basis V = E®Oe under hypotheses 
(HI) and (H2) by using a weaker version of Proposition 15.31 in which the ring of integers and 
its ideals are replaced by the appropriate number field. 
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5. Modules over Maximal Orders in Matrix Rings over Number Fields 
Let n G N, let F be a number field and let O = Op denote the ring of integers of F. 

Proposition 5.1. For each ideal a of O, let 

/ O ■■■ O \ 

"^"'"^ O O a-' 

\ a ■■■ a O ) 

denote the ring of all n x n matrices (xij) where Xn ranges over all elements of O, . . . , Xi„ 
ranges over all elements over a~^, and so on. (For n = 1, we take A„„ = O.) Then A^^n 
is a maximal O-order in Mat„(-F) and every maximal O-order in Mat„(-F) is isomorphic to 
one of this form, for some ideal a of O. 

Proof. This is a special case of |Rei75l Corollary 27.6]. □ 

Even though we can compute maximal orders (using |FriOOl Kapitel 3 and 4]), we do not 
automatically get them in the above "nice form" . We may assume that a maximal (9-order 
A C Mat„(F) is given as an O- module by a O-pseudo basis. We briefly describe how to find 
an isomorphism that transforms A into the "nice form" described in Proposition 15. 1[ 

Let Z C denote the (9-module generated by the first column of A. Let 

Z = Ozi® . . .® Ozn^i © azn, Zi e F", 

be the Steinitz form of Z for some ideal a of O. (The Steinitz form of a torsion-free, finitely 
generated module over a Dedekind domain is the form given in |FT9H Theorem 13(b)].) 

Lemma 5.2. Let S = {zi, . . . , Zn) G GL„(F) be the matrix with columns zi, . . . ,Zn. Then 

A = SAa,nS-\ 

Proof. It is easy to see that A = {A G Mat„(F) | XZ C Z}. With a slight abuse of notation 
we may write Z = {zi, . . . , Zn){0, ■ ■ ■ ,0, a)'^ = S{0, . ■ ■ ,0, a)^ and deduce 

XZCZ ^ A5(0,...,0,a)^ C 5(C,...,0,a)^ 

^ SS-^XS{0, . . . , O, a)^ C S{0, ...,0,a)^ 
^ S-^XS{0,...,0,af c{0,...,0,af 
^ S-'XS CA,,n. 

□ 

Replacing A by S^^AS and a A-module X by S^^X we may without loss of generality 
assume that our maximal order is in the above "nice form". We fix some maximal O-order 
A = Aa^n in Mat„(F) for the rest of this section and now turn to the problem of determining 
whether a A-module X is free of finite rank, and if so, whether generators can be computed. 
Let eki denote the matrix (xjj) G A C Mat„(F) with Xij = for (i, j) ^ {k, I) and Xki = 1. 
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Proposition 5.3. Let X be a A-module. Then X is free of rank d over A, if and only if 
there exist i, . . . , cui^n, . . . , uj^^i, . . . , cUd.n such that 

eiiX = Oui^i © ... © OtUi,„_i © a'^Ui^n © ... © OuJd,l © ... © OuJd,n-l © a~^UJd,n 

Further, when this is the case, X = Aui © ... © Aud where Uj := cnUj^i + . . . + CniUJj^n, 
j = 1, . . . ,ci. 

Proof. Suppose that X is free of rank d over A. Then en "cuts out the first row of each A" 
m X = ©tiA and so ciiX is of the desired form. 

Now suppose conversely that there exist ui^i, . . . , ui^n, ■ ■ ■ , ^^d,i, ■ ■ ■ , ^d,n such that 

euX = Ocui,i © ... © OcJi,„_i © o~^cji,„ © ... © OuJd,i © ... © Oud,n-i © a~^uJd,n 

and define Uj = CuUj^i + . . . + Cn^iUj^n for j = 1, . . . , d. 

For i ^ n and all j, we have coj^i G CuX C X and so enujj^i e X. Furthermore, e„i e Aa~^ 
and tUj^n G acnX C aX for all j, so enicjj^n G X. Therefore Uj G X for all j and so 
Acji © ... © AuJd C X. 

Note that X = enX © ■ ■ ■ © e„„X since en + . . . + e„„ is the n x n identity matrix. 
Furthermore, for all j, k we have 

^Ik^j = ^Iki^U^j,! + . . . + GnlUJj^n) = ^Ik^kl^jM = Cnt^j.fc = ^j,k- 

Therefore, since Ocik ^ A for k ^ n and o"^ei„ C A, we have 

enX = Ocui,i © ... © © a"^cji,„ © ... © OcJd,i © ... © OuJd,n~i © a"^cud,„ 

= Oencui © ... © Oei(„_i)u;i © a^-^ei^cui © ... © OcuUd © ... © Oei(„_i)u;rf © a"-^ei„u;rf 
C Auji © ... © Aa;^. 

Finally, observe that 

eiiX = eiienCiiX C e^ienX C eii(At^i © . . . © Acud) 

C Aui © ... © Aud for i ^ n, and 

e„„X = e„ienei„X = (oe„i)en(a~^ei„)X C (ae„i)enX 

C (ae„i) (Atui © ... © Aud) C Acji © . . . © Aud, 

so therefore X = enX © ■ ■ ■ © e„„X C Aui © ... © Acud. □ 

Corollary 5.4. Let X be a A-module. Then X is free of rank d over A if and only if cuX 
is of rank dn and Steinitz class [cT'^] as an O-module. 

We now give a description of Step (5) of Algorithm 13. 1[ Fix z, set A = S~^M.iS and 
replace X by S'~^X, where S is as in Lemma [5.21 It is straightforward to see that it suffices 
to determine elements uji^i, . . . , Ud^n satisfying the equation of Proposition l5.3l First, compute 
a Steinitz form for enX, i.e. find hj G enX and an ideal b oi O such that 

enX = Ofei © . . . © Ohdn-i © b&dn 
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(one can use the Magma function SteinitzForm) and check that [b] = [o"'^] in C\{0). Let 
Y = Obci(n-i)+i © ... © Obnd-i © bbdn and compute aY. This is a free 0-module of rank d 
and so we can compute an O-basis, Ci, . . . , q, which is also a "a~^ basis" of Y. Now we can 



take cuj^n 



Cj for j 



d and {ooj^k \ k ^ n} = {hi 



6. Enumerating Units 



:(n-i) 



}• 



Let d, n G N, let F be a number field and let O = Op denote the ring of integers of F. 
Let A be some maximal 0-order of Matn(F). By Lemma [5.21 we may assume that A is of 
the "nice form" Aa^„. Let g be some non-zero ideal oi Op and let f := gA. Throughout this 
section, we identify Matrf(A) with a subring of Matd„(F) in the obvious way. We wish to 
compute a set of representatives U C GL^(A) of the image of the natural projection map 
vr : GLrf(A) — ^ GLd(A) where A = A/f. 



Definition 6.1. Let i, j G {1, 



X G 



, nd} with i ^ j and let 

a^^ /Qa^^, ii i\n and j | ' 
a/ga, if j t ^ ^'^d i \ ' 



Then the elementary matrix Ejj(x) is the matrix in GLd(A) that has 1 in every diagonal 
entry, has x in the (z, j)-entry and is zero elsewhere. Let E(A) denote the subgroup of Ghd^Is) 
generated by all elementary matrices and define E(A) analogously. Note 7r(E(A)) = E(A). 



Proposition 6.2. Let e : 

subgroup of matrices (xij) G GL^^A) with xu G e{0 
i ^ j ■ Then '7r(GLd(A)) is generated by E(A) and V. 



be the natural projection map and let V be the 
Xii = 1 for i ^ I and Xij = for 



Proof. Let R := O/g and consider the i?-modules X := ®f^^R^ and Y := 
We choose ^ E and an integral ideal b such that 



i(i?"-i©a/go) 



eb, b + e = o. 

1. Then we have an isomorphism O/q 



a/ag of 



Let b E b and |/ G g such that b + y 
i?-modules defined by z + g t— > zb^ + ag. The inverse is given by z + ag i— > ^~^z + g. 

This induces an isomorphism ip: X —>■ Y, and as a consequence we obtain an isomorphism 

ij: GLndiR) GL,(A), 



A 



ij^l)l<i,j<d 



where Aij G Matn(O), 



$1 



/ 1 



/ 1 



and $2 



V 



J 
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One easily verifies that ipiEndiR)) = E(A) where End{R) denotes the group generated by 
elementary matrices of Mat„d(i?). From |Bas68l Corollary (9.3), p. 267] we deduce SL^diR) = 
End{R)- Hence we have a commutative diagram with exact rows 



1 ^SLnd{R)- 

1 -E(A) 

where det' := detoip~^. The diagram 



dct 



■GLndiR)- 



-GL,(A) — 



-R' 



-R' 



-E(A)- 



GL,(A)- 



-GL,(A) 



det 



-rx dct' 



-R' 



■1 



also has exact rows and a straightforward computation shows that it commutes. This im- 

r.T g 



mediately implies the assertions of the proposition. 



We now give a description of Step (7) of Algorithm 13. 1[ Fix i, and set n = rii, A 



S ^AiiS with S as in Lemma [521 Q = Qi, = Ei and U = Ui. Using, for example, |Coh93 



Algorithm 6.5.8], compute a generating set {ai, . . . , a^} for Op. Then {e{ai), . . . , e(as)} is a 
generating set for £{Op) and using the obvious isomorphism we have a generating set for V. 
The group E(A) is generated by the elementary matrices Eij{bijk) for z, j G {1, . . . , n}, i ^ j 
where for fixed {&yfc} is a Z-spanning set for O/g, a/ga or a~^/Qa~^, as appropriate. 
Such spanning sets can be computed using Hermite Normal Form techniques described, for 
example, in ^Coh93L Chapter 2.4]. By Proposition 16. 2[ we now have an explicit generating 
set for 7r(GLd(A)), and so it is straightforward to compute the desired set of representatives 

U = f/,;. 



7. Reducing the Number of Final Tests 

The final number of tests in step (8) of Algorithm 13.11 can be enormous. For example, if 
G ~ 5*4 (the symmetric group with 24 elements) and A = '^[G], then a computation shows 
that there are approximately 4.4 x 10^* tuples (Aj) G 111=1 which need to be tested. In 
this section, we describe an ad hoc method analogous to the one outlined in |Ble97l Section 
2] to reduce the number of tests required. 

However, even with this improvement, the number of tests which need to be performed 
is still very large. Despite this, somewhat surprisingly, we can find generating elements in 
many S'4-examples. It would be interesting to have an explanation, possibly probabilistic or 
heuristic in nature, for this phenomenon. 
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The improvement is based on the following simple observation. Let 

MX = aiVi © ... © amVm, 

X = biWi © ... © bmWm, 



be O^-pseudo-basis representations of AiX and X. Let A G GLm{E) be the transformation 
matrix such that 



















\ Vm J 



We now apply the Hermite Normal Form algorithm in Dedekind domains (see |CohOO 



Algorithm 1.4.7]) to the matrix A and the list of ideals (bi, . . . , bm), though we reduce rows 
rather than columns. We obtain a matrix U G GLm{E) and a list of ideals (ci, . . . , c^) such 
that the matrix H = UA is upper triangular with 1 on each diagonal entry. Moreover, 

Ci/ii © ... © C^nhra — b-i(l\ © ... © b^Ct^, 

where hi, ... denote the rows of H and denote the rows of A. This immediately 

implies that f/(wi, . . . , WmY' together with the list of ideals (ci, . . . , c^) is also a pseudo-basis 
for X. 

Now suppose that the vector (xi, . . . , x^) ^ E'^ defines an element x = YllLi ^i'^i ^ M.X. 
Then we have 

(7) xeX {xi,..., Xm)H~^ e {Ci,...,C^). 

Since is upper triangular, this leads to a much more efficient enumeration. In addition, 
in many cases the coefficients be easily computed by a clever choice of basis 

vi, . . . ,Vm- To illustrate this, we conclude this section with a brief discussion of the case 
where G ~ Sn, = Q and X ^ E[G] is locally free of rank 1. 
Let 

r 

$:Q[G] ^0Mat„,( 

i=l 

be the explicitly computable isomorphism that gives the Wedderburn decomposition of ( 
Let M C Q[G] be the maximal order such that ^{M) = ©[=iMat,i^(Z). For reasons of 
efficiency, we choose to work with matrices and henceforth consider AiX as a module over 
©[^]^Mat„.(Z) via the isomorphism Let B = {Bi, . . . , Br) denote a ©[^;^Matni(Z)-basis 
of MX. Let Ci^ki = (• • • jCfc/, . . .) G ©^^]^Mat„^. (Z), i = 1, . . . ,r, 1 < k,l < rii, denote the 
tuple of matrices with the matrix e^i in the i-th position and the zero matrix everywhere 
else. Then the set {ci^kiB} forms a Z-basis of MX. 

Now let (Ai,...,Ar) G rij ^i- Then the coefficients {xi^ki)i,k,i of (Aii?i, . . . , A^-Br) with 
respect to the basis {ci^kiB} are given by the coefficients of the matrices Aj because 

Aj-Bi = I \,ki^ki I Bi = Xi^ki (ekiBi) . 

\l<k,l<ni / l<k,l<ni 
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8. Implementation and Computational Results 

In this section, we describe the cases for which Algorithm 13.11 has been implemented in 
Magma ( |BCP97] ). The source code and input files are available from 

http : //www . mathematik . uni-kassel . de/ ~bley/pub . html. 

Let L/K he a. finite Galois extension of number fields with Galois group G such that E is 
a subfield of K and put d = [K : E]. discussed in Section HI Algorithm 13. II can be applied 
in this situation with X = Ol and A = A{E[G]; Ol). However, for the sake of simplicity, 
all aspects of the implementation in Magma are restricted to the case K = E = Q. 

Let Al/q = A{Q[G]] Ol). We have the following: 

(a) For any finite Galois extension L/Q, we can compute the associated order Al/q and 
check that Ol is locally free over Al/q, provided that Magma can compute the ring of 
integers Ol and that the Magma function AutomorphismGroup(L) works. Of course, 
this can be improved if theoretical information for either the ring of integers or the 
Galois group is available. 

(b) For G = A4, 5*4, -D„ or G abelian, we can explicitly compute the Wedderburn decom- 
position of Q[G] so that hypothesis (HI) is satisfied (here is the dihedral group 
of order 2n). 

(c) We can compute generators ctj such that MiOl = M.iOii whenever G = A4, S4, or 
G abelian. This works very well for small n and small abelian groups. For example, 
we successfully ran many experiments with dihedral groups Dn and n < 10. Note 
however, that our implementation requires that all the fields Ei have class number 1. 

(d) We can compute a generator a such that Ol = Al/qO- whenever G = A4, Dn with n 
small or G a small abelian group. For dihedral groups "small" means something like 
n < 10, for abelian groups experiments show that we can easily deal with groups of 
order < 20. For 5'4-extensions the number of checks required in the final enumeration 
is simply too large to be done in a naive way. Indeed, there are five Wedderburn 
components of Q[5'4] and if L/Q is tame, then the numbers of elements in the sets f/j 
(notation as in Proposition 12.41) are 

\Ui\=2, If/al = 2, \Us\ = 2304, \Ui\ = 22020096, jf/s] = 22020096. 

Note that these numbers are smaller if L/Q is wildly ramified. 

The authors implemented the reduction method outlined in Section [7] and, to their 
surprise, were able to compute a generator in all of the examples tested for which 
Ol is locally free over its associated order. (The fact that a generator exists in 
this situation is not surprising - see discussion below). As already mentioned, it 
would be very interesting to have some explanation for this unexpected phenomenon. 
Furthermore, Ol failed to be locally free over its associated order in all the computed 
5*4 examples for which L/Q is wildly ramified at both 2 and 3, though no examples 
of this were found when only one prime is wildly ramified. 
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(e) The algorithm as implemented in Magma is not deterministic, i.e., the program will 
produce different generators for the same extension when run at different times. The 
relevant steps, where different choices may finally lead to different generators, are the 
choice of a normal basis element for L/Q and the order of the final enumeration. 

The authors computed generators for more than 140 extensions L/Q with Galois group 
A4 taken from the tables of [KMj . This might lead one to speculate, for example, that every 
such extension has the property that Ol is free over Al/q- In principle, one can prove or 
disprove this assertion in the following way. 

It is well-known that the locally free class group C1(Z[A4]) is trivial (see [CouOGj . for 
example), and from this it is straightforward to show that Cl(^) is also trivial for any 
order A with Z[Ai] C A C Q[Ai]. Since Q[A4] satisfies the Eichler condition relative to Z 
(see |Rei75l Definitions 34.3 and 38.1]), a result of Jacobinski shows that if an ^-module 
has trivial class in Cl(v/l), then it is in fact free over A (see |Rei75t Theorem 38.2], for 
example). Hence we are reduced to establishing whether Ol is locally free over Al/q for 
every 744-extension L/Q. The authors thank the referee for the following observation: as the 
ramification filtrations for primes above 2 or 3 are very restricted, it seems plausible that one 
could in fact determine all possible associated orders and local Galois module structures by 
hand (as far as the authors and the referee are aware, no-one has actually done this). One 
might also be able to carry out a complete analysis for S'4-extensions of Q, where again it is 
known that the locally free class group is trivial (see |RU74j ) and Q[S^] satisfies the Eichler 
condition relative to Z. (However, unlike the ^4 case, there are many known examples of 
S'4-extensions for which local freeness fails - see (d) above.) 

In fact, for any number field K and any finite group G, it is possible to check in a finite 
amount of time whether every extension L/K with Galois group G has the property that Ol 
is locally free over Al/k '■= A{K[G]; L). By Noether's Theorem (see |Noe32] ). we have local 
freeness at all primes of Ok that are at most tamely ramified in L/K. Therefore, it suffices to 
check all extensions of p-adic fields Kp with Galois group H, where p ranges over all primes of 
Ok dividing the order of G and H ranges over all solvable subgroups of G. Enumerating all 
such extensions is possible using the algorithm of |PR01j (this gives generating polynomials 
for all extensions of a p-adic field Kp of given degree and discriminant), and local freeness 
can be checked using the method outlined in |BWt Section 4.2]. 
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